update filebeat repository and documentation

ansible-role-elk/meta/main.yml

@@ -1,8 +1,8 @@
 ---
 galaxy_info:
-  author: geerlingguy
-  description: Elasticsearch for Linux.
-  company: "Midwestern Mac, LLC"
+  author: Jose Luis Ruiz
+  description: Elasticsearch Logstash and Kibana for Linux.
+  company: "Wazuh"
   license: "license (BSD, MIT)"
   min_ansible_version: 1.8
   platforms:

ansible-role-elk/tasks/RedHat.yml

@@ -33,7 +33,7 @@
   yum: pkg={{ item }}
        state=present
   with_items:
-    - logstash-5.2.2
+    - logstash-5.1.2
     - elasticsearch-5.2.2
     - kibana-5.2.2
   tags:

ansible-role-elk/templates/01-wazuh.conf.j2

@@ -4,7 +4,7 @@
 input {
     beats {
         port => 5000
-        codec => "json"
+        codec => "json_lines"
 #        ssl => true
 #        ssl_certificate => "/etc/logstash/logstash.crt"
 #        ssl_key => "/etc/logstash/logstash.key"

ansible-role-filebeat/defaults/main.yml

@@ -16,7 +16,7 @@ filebeat_output_elasticsearch_hosts:
 
 filebeat_output_logstash_enabled: true
 filebeat_output_logstash_hosts:
-  - "192.168.33.172:5000"
+  - "192.168.212.153:5000"
 
 filebeat_enable_logging: true
 filebeat_log_level: debug

ansible-role-filebeat/tasks/setup-Debian.yml

@@ -4,11 +4,11 @@
 
 - name: Add Elasticsearch apt key.
   apt_key:
-    url: https://packages.elastic.co/GPG-KEY-elasticsearch
+    url: https://artifacts.elastic.co/GPG-KEY-elasticsearch
     state: present
 
 - name: Add Filebeat repository.
   apt_repository:
-    repo: 'deb https://packages.elastic.co/beats/apt stable main'
+    repo: 'deb https://artifacts.elastic.co/packages/5.x/apt stable main'
     state: present
     update_cache: yes

ansible-role-filebeat/tasks/setup-RedHat.yml

@@ -1,11 +1,13 @@
 ---
 - name: Add Elasticsearch GPG key.
   rpm_key:
-    key: https://packages.elastic.co/GPG-KEY-elasticsearch
+    key: https://artifacts.elastic.co/GPG-KEY-elasticsearch
     state: present
 
-- name: Add Filebeat repository.
-  template:
-    src: beats.repo.j2
-    dest: /etc/yum.repos.d/beats.repo
-    mode: 0644
+- name: RedHat | Install Filebeats repo
+  yum_repository:
+    name: elk_repo
+    description: Elastic repository for 5.x packages
+    baseurl: https://artifacts.elastic.co/packages/5.x/yum
+    gpgkey: https://artifacts.elastic.co/GPG-KEY-elasticsearch
+    gpgcheck: yes

ansible-role-filebeat/templates/beats.repo.j2

@@ -1,6 +0,0 @@
-[beats]
-name=Elastic Beats Repository
-baseurl=https://packages.elastic.co/beats/yum/el/$basearch
-enabled=1
-gpgkey=https://packages.elastic.co/GPG-KEY-elasticsearch
-gpgcheck=1

ansible-wazuh-server/meta/main.yml

@@ -1,17 +1,14 @@
 ---
 galaxy_info:
-  author: Werner Dijkerman
-  description: Installing and maintaining the ossec-server.
-  company: myCompany.Dotcom
+  author: Jose Luis Ruiz
+  description: Installing and maintaining the wazuh-manager.
+  company: wazuh.com
   license: license (GPLv3)
   min_ansible_version: 1.4
   platforms:
   - name: EL
     versions:
     - all
-  - name: Fedora
-    versions:
-    - all
   - name: Ubuntu
     versions:
     - all